[1.6.x] Added a note regarding django.contrib.auth.authenticate.

Thanks Josh Brown for the suggestion.

Backport of ae5b662796 from master